Can't get to second switch through trunk

tim829s · August 29, 2023, 3:57pm

So I’m scratching my head on this one, I have two Mikrotik switches connected to a a Cisco switch through trunks ports.

Sfp-sfpplus1 on the first switch connects back to the Cisco. I can get to switch1 on the management IP through the trunk fine.
Sfp-sfpplus1 on switch2 connects to sfp-sfpplus2 on switch1, I can’t ping or access the management interface on switch2.
The weird thing is all the trunk ports are configured the same, so I’m not sure what I’m missing. Also, if I go directly from the Cisco to sfp-sfpplus1 on switch2 I can connect fine. It’s like I have something misconfigured with my sfp-sfpplus2 interface on switch1. Below are the configs to both the switches.

switch1

# 2023-08-29 11:52:52 by RouterOS 7.11
# software id = IC0U-MPXF
#
# model = CRS318-16P-2S+
# serial number = ....
add admin-mac=48:A9:8A:EC:7C:D4 auto-mac=no name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=ether5 ] disabled=yes
set [ find default-name=ether6 ] disabled=yes
set [ find default-name=ether7 ] disabled=yes
set [ find default-name=ether8 ] disabled=yes
set [ find default-name=ether9 ] disabled=yes
set [ find default-name=ether10 ] disabled=yes
set [ find default-name=ether11 ] disabled=yes
set [ find default-name=ether12 ] disabled=yes
set [ find default-name=ether13 ] disabled=yes
set [ find default-name=ether14 ] disabled=yes
set [ find default-name=ether15 ] disabled=yes
set [ find default-name=ether16 ] disabled=yes
/interface vlan
add interface=bridge name=network vlan-id=10
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=AP interface=ether1 pvid=100
add bridge=bridge comment=Camera frame-types=admit-only-untagged-and-priority-tagged interface=ether2 pvid=103
add bridge=bridge comment=Camera frame-types=admit-only-untagged-and-priority-tagged interface=ether3 pvid=103
add bridge=bridge comment=Camera frame-types=admit-only-untagged-and-priority-tagged interface=ether4 pvid=103
add bridge=bridge comment=defconf disabled=yes interface=ether5
add bridge=bridge comment=defconf disabled=yes interface=ether6
add bridge=bridge comment=defconf disabled=yes interface=ether7
add bridge=bridge comment=defconf disabled=yes interface=ether8
add bridge=bridge comment=defconf disabled=yes interface=ether9
add bridge=bridge comment=defconf disabled=yes interface=ether10
add bridge=bridge comment=defconf disabled=yes interface=ether11
add bridge=bridge comment=defconf disabled=yes interface=ether12
add bridge=bridge comment=defconf disabled=yes interface=ether13
add bridge=bridge comment=defconf disabled=yes interface=ether14
add bridge=bridge comment=defconf disabled=yes interface=ether15
add bridge=bridge comment=defconf disabled=yes interface=ether16
add bridge=bridge comment=Trunk-1 frame-types=admit-only-vlan-tagged interface=sfp-sfpplus1
add bridge=bridge comment=Trunk-2 frame-types=admit-only-vlan-tagged interface=sfp-sfpplus2
/interface bridge vlan
add bridge=bridge tagged=bridge,sfp-sfpplus1,sfp-sfpplus2 vlan-ids=10
add bridge=bridge tagged=sfp-sfpplus1,sfp-sfpplus2 untagged=ether1 vlan-ids=100
add bridge=bridge tagged=sfp-sfpplus1,sfp-sfpplus2 untagged=ether2,ether3,ether4 vlan-ids=103
add bridge=bridge tagged=sfp-sfpplus1,sfp-sfpplus2,ether1 vlan-ids=666
add bridge=bridge tagged=sfp-sfpplus1,sfp-sfpplus2,ether1 vlan-ids=667
add bridge=bridge tagged=sfp-sfpplus1,sfp-sfpplus2 vlan-ids=101
/interface list member
add interface=ether1 list=LAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=ether9 list=LAN
add interface=ether10 list=LAN
add interface=ether11 list=LAN
add interface=ether12 list=LAN
add interface=ether13 list=LAN
add interface=ether14 list=LAN
add interface=ether15 list=LAN
add interface=ether16 list=LAN
add interface=sfp-sfpplus1 list=LAN
add interface=sfp-sfpplus2 list=LAN
/ip address
add address=10.15.10.54/24 interface=network network=10.15.10.0
/ip route
add gateway=10.15.10.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set winbox disabled=yes
/system clock
set time-zone-name=America/New_York
/system identity
set name=WCP-Pole1-SW2
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=129.6.15.28
add address=132.163.96.5
/system routerboard settings
set boot-os=router-os

switch2

# 2023-08-29 11:32:12 by RouterOS 7.11
# software id = 73UE-HFYS
#
# model = CRS318-16P-2S+
# serial number = 
/interface bridge
add admin-mac=48:A9:8A:EC:7C:D4 auto-mac=no name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] mac-address=48:A9:8A:EC:7C:D4
set [ find default-name=ether2 ] mac-address=48:A9:8A:EC:7C:D5
set [ find default-name=ether3 ] mac-address=48:A9:8A:EC:7C:D6
set [ find default-name=ether4 ] mac-address=48:A9:8A:EC:7C:D7
set [ find default-name=ether5 ] disabled=yes mac-address=48:A9:8A:EC:7C:D8
set [ find default-name=ether6 ] disabled=yes mac-address=48:A9:8A:EC:7C:D9
set [ find default-name=ether7 ] disabled=yes mac-address=48:A9:8A:EC:7C:DA
set [ find default-name=ether8 ] disabled=yes mac-address=48:A9:8A:EC:7C:DB
set [ find default-name=ether9 ] disabled=yes mac-address=48:A9:8A:EC:7C:DC
set [ find default-name=ether10 ] disabled=yes mac-address=48:A9:8A:EC:7C:DD
set [ find default-name=ether11 ] disabled=yes mac-address=48:A9:8A:EC:7C:DE
set [ find default-name=ether12 ] disabled=yes mac-address=48:A9:8A:EC:7C:DF
set [ find default-name=ether13 ] disabled=yes mac-address=48:A9:8A:EC:7C:E0
set [ find default-name=ether14 ] disabled=yes mac-address=48:A9:8A:EC:7C:E1
set [ find default-name=ether15 ] disabled=yes mac-address=48:A9:8A:EC:7C:E2
set [ find default-name=ether16 ] disabled=yes mac-address=48:A9:8A:EC:7C:E3
set [ find default-name=sfp-sfpplus1 ] mac-address=48:A9:8A:EC:7C:E4
set [ find default-name=sfp-sfpplus2 ] mac-address=48:A9:8A:EC:7C:E5
/interface vlan
add interface=bridge name=network vlan-id=10
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=AP interface=ether1 pvid=100
add bridge=bridge comment=Camera frame-types=admit-only-untagged-and-priority-tagged interface=ether2 pvid=103
add bridge=bridge comment=Camera frame-types=admit-only-untagged-and-priority-tagged interface=ether3 pvid=103
add bridge=bridge comment=Camera frame-types=admit-only-untagged-and-priority-tagged interface=ether4 pvid=103
add bridge=bridge comment=defconf disabled=yes interface=ether5
add bridge=bridge comment=defconf disabled=yes interface=ether6
add bridge=bridge comment=defconf disabled=yes interface=ether7
add bridge=bridge comment=defconf disabled=yes interface=ether8
add bridge=bridge comment=defconf disabled=yes interface=ether9
add bridge=bridge comment=defconf disabled=yes interface=ether10
add bridge=bridge comment=defconf disabled=yes interface=ether11
add bridge=bridge comment=defconf disabled=yes interface=ether12
add bridge=bridge comment=defconf disabled=yes interface=ether13
add bridge=bridge comment=defconf disabled=yes interface=ether14
add bridge=bridge comment=defconf disabled=yes interface=ether15
add bridge=bridge comment=defconf disabled=yes interface=ether16
add bridge=bridge comment=Trunk-1 frame-types=admit-only-vlan-tagged interface=sfp-sfpplus1
add bridge=bridge comment=Trunk-2 frame-types=admit-only-vlan-tagged interface=sfp-sfpplus2
/interface bridge vlan
add bridge=bridge tagged=bridge,sfp-sfpplus1,sfp-sfpplus2 vlan-ids=10
add bridge=bridge tagged=sfp-sfpplus1,sfp-sfpplus2 untagged=ether1 vlan-ids=100
add bridge=bridge tagged=sfp-sfpplus1,sfp-sfpplus2 untagged=ether2,ether3,ether4 vlan-ids=103
add bridge=bridge tagged=sfp-sfpplus1,sfp-sfpplus2,ether1 vlan-ids=666
add bridge=bridge tagged=sfp-sfpplus1,sfp-sfpplus2,ether1 vlan-ids=667
/interface list member
add interface=ether1 list=LAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=ether9 list=LAN
add interface=ether10 list=LAN
add interface=ether11 list=LAN
add interface=ether12 list=LAN
add interface=ether13 list=LAN
add interface=ether14 list=LAN
add interface=ether15 list=LAN
add interface=ether16 list=LAN
add interface=sfp-sfpplus1 list=LAN
add interface=sfp-sfpplus2 list=LAN
/ip address
add address=10.15.10.55/24 interface=network network=10.15.10.0
/ip route
add gateway=10.15.10.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set winbox disabled=yes
/system clock
set time-zone-name=America/New_York
/system identity
set name=WCP-Pole2-SW
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=129.6.15.28
add address=132.163.96.5
/system routerboard settings
set boot-os=router-os

mkx · August 29, 2023, 4:45pm

Did you, by any chance, transfer config from switch1 to switch2 by doing backup on first one and restore on the second one? That should never be done…
Presence of all those “mac-address=” properties in ethernet interface definitions on switch2 is highly suspicious. Both bridges have the same MAC address so they can’t communicate on ethernet level (and hence on IP level).

tim829s · August 29, 2023, 4:47pm

So I found another post where someone had similar issues and he said he got it working by resetting the switch and reconfiguring it from scratch. I just did the same and now it’s working!

And yes, I did backup the config from the first switch and load it into the second. With Cisco this is what I’ve always done. I’m assuming it’s not recommended with RouterOS?

Thanks